19 Aug 2026 to 14 Oct 2026IndiaChatGPT (reported)
The Ahmedabad Cyber Crime Branch said in October 2026 that it had arrested two men from Rajasthan who sold 686 counterfeit passes for Navratri garba events in Ahmedabad through discounted Instagram advertisements, collecting about Rs 8 lakh. According to the police account relayed by PTI, IANS, Ahmedabad Mirror and Gujarat Samachar, the accused prepared the passes and promotional material with ChatGPT, adding barcodes and QR codes so that they looked genuine, and sent them to buyers from email addresses resembling the organisers'. IANS reports that the case came to light when customers found their passes invalid at the venues. PTI and Ahmedabad Mirror say it came to light through a complaint filed on 16 October by a garba organiser whose event name and logo were used. How many buyers lost money is not reported; 686 is the number of passes.
Core concern Low reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 4 sources, 1 underlying account · Added 20/10/2026
2026ChinaDoubao (reported)
According to his own social-media posts and video, as reported by Dahe Daily (15 May 2026) and National Business Daily (20 May 2026), a user in China who had booked flights from Shijiazhuang to Chongqing for 2 May 2026 decided to drive instead and asked the Doubao chatbot about the refund fee. Doubao told him he could safely refund and that the fee would be small (only 5% in National Business Daily's account, under 100 yuan in Dahe Daily's). He refunded without checking the airline's rules and was charged about 40%, 600 yuan. When he returned to the chatbot, Doubao said it would handle the claim, promised to pay him 600 yuan itself if the money was not recovered by 6 May and produced a 'compensation commitment letter'. On 6 May it said it would pay by midnight and asked for his WeChat payment code; on 7 May it said that as an AI it could not make transfers and admitted its error. He then used Doubao to draft a complaint, was told by it that he did not need a lawyer, and on 12 May submitted a suit against the app's operator, Beijing Chuntian Zhiyun Technology, according to a screenshot he posted (Dahe Daily names the Beijing Internet Court). His posts had been deleted by 19 May. Doubao's customer service told Dahe Daily the matter had been recorded; Doubao and ByteDance did not answer National Business Daily. Whether the court accepted the case, and its outcome, are not reported.
Core concern Low reported severity Lawsuit Filed
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 17/10/2026
1 Jul 2026Event location unknownIndie Campers chatbot (reported)
In a Reddit post on 4 July 2026 a renter wrote that on 1 July they booked a camper van from Indie Campers for a trip on 12 to 18 July and, before paying, asked the AI chatbot on the company's official website whether they could travel to Montenegro. According to the post, the bot explicitly guaranteed that it was allowed, and the renter paid in full. The renter wrote that an email to human support an hour later went unanswered for more than 48 hours, that support then said the terms strictly forbid travel to Montenegro, and that the company said it takes no responsibility for AI answers and processed the cancellation with its standard late-cancellation penalty, refunding 5% and keeping 95%. In a reply the renter wrote that 1,500 euros is not a small amount for them, said a card chargeback complaint had been sent to the bank with screenshots, and said they lived in Spain. A Dutch internet-law blog relayed the post on 9 July 2026; two of its commenters reported asking the chatbot themselves, one receiving an answer that travel in Europe including Montenegro was covered and another a list of allowed countries without Montenegro. No response from Indie Campers was found, and the outcome of the chargeback is unknown.
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 2 sources · Added 13/10/2026
27 Sept 2026 to 29 Sept 2026IndiaUnidentified video tool
Deccan Herald reports, citing Bengaluru police, that a 23-year-old man lost Rs 1.85 lakh in an alleged sextortion scam. He matched with a woman on a dating app on 27 September 2026 and exchanged numbers; he told police that he then received a WhatsApp video call from her number lasting five to six seconds. Police said he then received an obscene video manipulated using AI and the sender threatened to circulate it unless he paid. Fearing exposure, he borrowed money from a friend and transferred Rs 1.85 lakh to several UPI IDs between 27 and 29 September as the threats continued, a police officer said. Police registered a first information report on his online cybercrime complaint and are trying to trace the suspects. The report does not say how police established that the video was AI-manipulated, and the tool is not named.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 1 source · Added 12/10/2026
2 Feb 2026 to 4 Feb 2026IndiaUnidentified video tool (suspected)
In February 2026 a 16-year-old boy in Indore, Madhya Pradesh, did not return home from a coaching class, and his family filed a missing-person complaint. While they searched, they received a video call from unknown people who claimed to be holding him; the call showed a boy appearing to be threatened with a knife and the callers demanded about Rs 1 lakh through a QR code. In fear, the parents transferred Rs 1.02 lakh. The boy was found safe within two days and said he knew nothing of any video call. Additional DCP (Crime) Rajesh Dandotia told reporters that the family was convinced because they saw what looked like their own child, that police have strong reasons to believe deepfake technology was used, and that the crime branch is investigating; The Indian Express reports that police believe it is the city's first known case of deepfake technology used for extortion. Accounts differ on where the boy had been. The AI involvement is recorded as suspected because no forensic finding is reported.
Core concern Medium reported severity Investigation Opened
AI involvement suspected · Causal attribution alleged · 3 sources · Added 11/10/2026
Sept 2026Event location unknownGoogle AI Mode
On 4 October 2026 a crypto investigator who posts on X as JP (@rugpullfinder) said a fake TRON energy-rental site, tronify.rent, took $69,651 from about 80 people in September and that, according to a victim report, Google's Gemini had confirmed it was a safe website. His post carries two screenshots. The Crypto Times, which inspected them, reports that the first shows Google Search's AI Mode answering a user who asked whether it was safe to connect a wallet and which domain was correct: 'The official, correct web domain is tronify.rent', supported by a statement that Trust Wallet had natively integrated Tronify. In the same answer, under a heading on avoiding scams, it tells users never to approve unlimited token allowances. The Crypto Times reports that Trust Wallet's October 2025 announcement of the integration does not name tronify.rent and that a December 2024 Trust Wallet post links to Tronify's market at tronify.io. The second screenshot shows Trust Wallet notifications dated Monday, 28 September: an unlimited USDT approval to an address on the investigator's list, then 1,419.699184 USDT sent to another listed address. The Crypto Times has not verified the loss total or the victim count. No inspected source publishes the victim's own account or says the screenshots come from that victim.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 06/10/2026
29 Jul 2026 to 1 Sept 2026BangladeshUnidentified voice-cloning tool
Khulna Gazette, the Daily Times of Bangladesh, Newsbangla24 and BD Today (all 29 September 2026) report from the first information report and Khulna Metropolitan Police Detective Branch (DB) statements that a businessman in Khulna city was joined on 29 July 2026 to a WhatsApp group call with a person introduced as National Parliament Whip Raqibul Islam Bakul, who discussed the sale of old machinery from Platinum Jute Mill and asked for advance payment. The businessman handed over Tk2 crore in cash that afternoon to men sent as representatives and a further Tk1.5 crore after inspecting the mill (30 July per Khulna Gazette and BD Today; 2 August per the Daily Times of Bangladesh and Newsbangla24), a total of Tk3.5 crore. When the businessman met the Whip in person in Khulna on 1 September, the Whip disclaimed any knowledge of it. The complaint filed on 18 September under the Cyber Security Act says the caller's voice had been changed with digital technology and artificial intelligence to pass as the Whip's; the DB deputy commissioner described the case to Asia Post as fraud by imitating the Whip's voice through AI. A press release from the Khulna city BNP media cell, sent on 4 September and published by Jaijaidin on 5 September, had already said a ring was using a US number and AI to clone the Whip's voice and demand money. Police arrested four people, recovered Tk12 lakh, and the prime accused gave a confessional statement before a magistrate on 28 September; on 29 September a court added two more detained men to the case. The voice-cloning tool is not identified and no forensic finding has been reported.
Core concern High reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 7 sources, 2 underlying accounts · Added 01/10/2026
23 Feb 2026 to 25 Feb 2026ItalyUnidentified voice-cloning tool
On 23 February 2026 Paolo Molesini, then chairman of Fideuram (the private-banking subsidiary of Intesa Sanpaolo), received a WhatsApp message from an unknown number from someone claiming to be Intesa's chief executive Carlo Messina, announcing a confidential acquisition that had to be executed through Fideuram. The same day a caller presenting as a lawyer of A&O Shearman whom Molesini knew, whose voice ANSA, Il Fatto Quotidiano and Corriere della Sera, reporting from the Milan court papers, describe as created with artificial intelligence (today.it, which also cites the seizure decree, writes that the court papers do not yet answer whether the voice was imitated), had him sign a confidentiality agreement and sent eleven payment instructions; Fideuram's treasury head was separately contacted by someone posing as Fideuram's CEO. Between 23 and 25 February eleven transfers totalling about 95 million euros went to accounts in Portugal and at Bank of China; the bank's alarm systems and the Milan prosecutors recovered about 40-42 million from China and 13 million seized in Portugal, leaving at least 36 million (39.5 million per the court papers) missing after conversion into cryptocurrency. Molesini, who Corriere writes is not under investigation, resigned as chairman on 12 March 2026, which Fideuram announced as being for personal reasons; a 48-year-old Israeli citizen is under investigation as a member of the gang.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution supported · 8 sources, 5 underlying accounts · Added 30/09/2026
11 Aug 2026BrazilUnidentified voice-cloning tool
On Monday 10 August 2026 a digital influencer from Picos, in the centre-south of Piauí, began negotiating a car advertised online for sale in Fortaleza (Ceará), where an uncle of his lives, and asked the sellers to take the car to the uncle so he could inspect it. On Tuesday 11 August a contact using a different number but the uncle's photo sent him audio messages in a voice identical to his uncle's, generated with artificial intelligence, saying the car was in good condition and telling him to make the bank transfer. Believing he was speaking to his uncle, he transferred the money; when he then called the uncle's real number he learned he had been defrauded. The loss exceeded R$56,000, money he says he had saved for years. He registered a police report on 11 August; the Piauí property-crimes unit (Depatri) is investigating and he is seeking a refund from the banks. The account is the victim's own, reported by G1 Piauí on 13 August 2026 from his social-media posts and an interview; the police unit did not respond to G1 before publication.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 1 source · Added 20/09/2026
19 May 2026United StatesUnidentified voice-cloning tool (suspected)
A married couple in their sixties buying a US$460,000 condo in Hudsonville, near Grand Rapids, Michigan, received an email on 19 May 2026, days before closing, telling them to wire US$66,026.92 for the down payment and closing costs within 24 hours. The email listed a phone number differing from their loan officer's by two digits, and the husband then received a call confirming the instructions in a voice that sounded just like the loan officer. The couple borrowed from family and other sources and wired the money. The day before closing their real loan officer sent the actual statement; the closing was cancelled hours before signing and the money was gone. The husband now believes the call came from a spoofed number using AI-assisted voice cloning; Tyler Adams of CertifID, which is working with the couple and federal officials, said someone's email in the transaction was probably compromised and that the scammers likely cloned the loan officer's voice from social-media clips. The sender's address had two extra letters ('UnitedsMortgages' instead of 'UnitedMortgage'). Neither the lender nor the loan officer is accused of complicity. The couple later completed the purchase in early June from their mutual fund, reported the loss to the FBI's Internet Crime Complaint Center, and describe lasting apprehension and have discussed delaying retirement. CNN reported the case on 15 September 2026; the account the money went to has since closed.
Core concern Medium reported severity Investigation Opened
AI involvement suspected · Causal attribution alleged · 2 sources, 1 underlying account · Added 20/09/2026
1 Aug 2026 to 16 Sept 2026KazakhstanUnidentified video tool
On 16 September 2026 the Prosecutor General's Office of Kazakhstan warned of an investment-fraud scheme in which criminals advertise non-existent projects on TikTok, Instagram, YouTube and other platforms using deepfake videos of well-known people and fake 'AI' investment platforms promising very high passive income: 'Kaspi AI' with Mikhail Lomtadze, 'Quantum AI' with Elon Musk, 'TON' with Pavel Durov, and 'people's investments' in KazMunayGas or Gazprom fronted by news presenters from Khabar 24, KTK and Channel One. The office said 119 such cases had been registered across the country in the previous one and a half months. Its example: in September 2026 a woman from Taldykorgan saw an Instagram advertisement offering high returns from share trading, left her details through the link, was contacted by the fraudsters and, following their instructions, transferred more than 7 million tenge to third-party accounts; the money and supposed dividends appeared in a fake wallet that she could not withdraw from. A pre-trial investigation is under way. The office urged people not to trust guaranteed-return offers or transfer money to strangers.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution supported · 5 sources, 1 underlying account · Added 20/09/2026
Jul 2026GreeceUnidentified voice-cloning tool
On 18 September 2026 the Hellenic Police announced that its Organised Crime Directorate had dismantled a criminal organisation, active since at least early July 2026, whose members defrauded and robbed residents of Attica by posing on the phone as staff of the electricity distributor ΔΕΔΔΗΕ, mobile operators or fibre-optic installers. When a target hesitated, the callers asked for a relative's phone number, called that relative under a mobile-operator pretext to obtain a voice sample, cloned the voice with an AI tool and then played the cloned voice to the target to 'confirm' the instructions. Two men aged 23 and 25, described as the ring's 'collectors', were arrested in Nea Ionia just after removing valuables worth €30,000 from a victim's home; the case file, covering criminal organisation, fraud and aggravated theft with proceeds above €120,000, names four more people. Police have so far confirmed at least five further cases with the same method and estimate the group's total proceeds above €1 million. The two arrested were brought before the prosecutor and referred to an investigating judge.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution supported · 3 sources, 1 underlying account · Added 19/09/2026
May 2026SingaporeUnidentified video tool
In May 2026 the Singapore Police Force (SPF) reported that a man had lost at least S$4.9 million (about US$3.8 million) to a government-official impersonation scam. He received a WhatsApp message carrying the profile photo of Secretary to the Cabinet Wong Hong Kuan and an email from a proton.me address in that name, requesting urgent funding assistance for 'the situation in the Strait of Hormuz', with a fake 'letter of guarantee' bearing the Prime Minister's signature promising reimbursement within 15 business days; he signed a non-disclosure agreement and supplied a copy of his identity card. He was then invited to a Zoom video conference in which Prime Minister Lawrence Wong, President Tharman Shanmugaratnam, Minister Indranee Rajah, Monetary Authority of Singapore representatives and foreign officials appeared; all were fabricated with deepfake AI, and the closing 'remarks' by the fake Prime Minister acknowledged the victim's attendance. Contacted afterwards on WhatsApp by a scammer posing as a lawyer, he transferred the money in a series of transactions to a corporate bank account, and realised the fraud only when he contacted the real cabinet secretary. On 16 May the police released footage of the fake conference, noting lips out of sync with speech, audio broadcast from a single account and a distorted background.
Core concern High reported severity Investigation Opened
AI involvement supported · Causal attribution supported · 3 sources, 1 underlying account · Added 18/09/2026
12 Jun 2026RussiaChatGPT
On 12 June 2026 a Russian-speaking crypto investor, known by the alias Alex (@vesnuhin), asked ChatGPT in Russian where to swap sFLR for WFLR tokens. ChatGPT's reply included a link to sceptre.network, a phishing clone of the legitimate sceptre.fi. He connected his wallet and signed an unlimited-approval transaction; within seconds about 1.9 million FXRP, worth roughly $2.1 million (about 180 million rubles), were drained. A blockchain analyst traced the theft, and reported that the phishing link appeared only in Russian-language answers. Russia's Interior Ministry (MVD) later confirmed the loss.
Core concern High reported severity Investigation Opened
AI involvement supported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 17/09/2026